Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEF65236F53A11EFB0A0748A762E951A.roa
File: BEF65236F53A11EFB0A0748A762E951A.roa (raw, json)
Hash identifier: v7t5EIvKfQTHJwPsdCjdcLFVy0ijtQxuo7Ty9dD7OT4=
Subject key identifier: 77:F5:82:C7:C9:4D:40:DF:99:56:49:5F:EC:BA:87:18:2D:10:7C:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013B72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEF65236F53A11EFB0A0748A762E951A.roa
Signing time: Thu 27 Feb 2025 18:43:33 +0000
ROA not before: Thu 27 Feb 2025 18:43:30 +0000
ROA not after: Sat 05 Apr 2025 18:43:30 +0000
asID: 205125
IP address blocks: 156.255.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 18:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80754 (0x13b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 18:43:30 2025 GMT
Not After : Apr 5 18:43:30 2025 GMT
Subject: CN=67c0b255-7a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:4f:7c:29:ea:9e:2f:46:3b:94:4a:4a:b2:
e2:d3:f2:6f:dc:ef:8a:95:3d:d8:0b:ac:9f:7c:79:
65:9b:3b:6f:6f:27:df:21:5b:01:73:d3:27:ea:7e:
24:60:1e:52:43:c2:03:2c:e5:a4:0e:4f:fa:b4:0f:
c4:63:d2:0c:48:76:28:01:ce:df:cc:c4:39:d1:bc:
82:d2:de:c7:14:8e:b7:e4:3d:2b:84:45:6b:8a:dc:
74:cd:ed:72:79:3f:02:f6:b4:2a:20:13:4e:5a:9a:
21:e0:5f:08:7c:a7:33:08:e3:b2:07:94:d2:17:a9:
07:24:ba:67:08:ea:46:c8:e0:4c:ad:c9:6a:1e:c5:
92:10:ad:49:de:c6:dc:12:1d:52:91:db:ab:a1:3b:
07:06:9d:13:56:7e:7d:c3:34:05:3d:4e:23:06:a8:
2d:5e:0a:3e:8c:7c:bf:d4:c0:c3:1c:98:2d:19:47:
13:5b:1e:aa:9e:e4:d1:d8:cf:5d:46:8b:9c:e4:3d:
0c:e7:50:a1:78:e3:a7:e5:79:cf:56:41:0f:c4:80:
1f:90:a0:f2:04:87:c5:a2:ee:0a:21:22:03:88:ad:
3c:be:16:12:98:33:61:b7:00:02:9b:8d:59:89:d3:
f4:b3:bf:2f:7b:e6:a2:58:27:af:1e:7c:55:34:7a:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:82:C7:C9:4D:40:DF:99:56:49:5F:EC:BA:87:18:2D:10:7C:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEF65236F53A11EFB0A0748A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:24:21:1f:a6:52:24:c2:0e:f6:94:34:4f:9d:9a:2d:b8:7a:
81:ec:ed:59:91:3e:24:bc:87:29:53:e2:4d:45:6b:04:a5:49:
fd:bb:e5:9c:ce:96:d2:72:84:30:a8:b8:5c:9d:22:44:ff:6c:
c6:40:4c:b7:93:f7:e6:f0:0e:b3:b8:ba:43:70:0f:a0:3b:6b:
4a:90:b1:fa:9d:8d:fc:aa:1b:db:e0:c7:2a:f1:fe:b2:f7:22:
10:12:b4:0b:30:6c:8e:78:5a:88:84:b5:32:d6:26:12:d4:7b:
74:39:7f:c7:d0:57:36:af:92:10:3c:81:52:cd:85:d1:35:1b:
0e:09:e8:04:21:43:d1:bc:7b:bb:f2:99:5a:6b:c4:32:05:25:
1b:77:39:0b:bd:0e:53:2f:a5:30:3c:2e:0e:da:b5:33:fd:c4:
83:69:e2:ab:93:33:62:23:df:5d:b2:bc:d6:bb:80:4b:0c:83:
76:93:a8:e3:84:4d:85:7e:ef:e6:d1:4d:a8:09:fd:78:6c:70:
90:8c:5c:53:95:71:a6:b3:c0:72:95:22:fb:98:25:4b:1a:10:
8b:8b:12:4d:91:83:e3:0d:da:8f:3d:c1:1a:ed:b8:6f:d0:70:
5d:27:2c:48:3f:32:73:6a:95:ff:0d:78:8e:3d:0b:5a:38:90:
9c:67:b2:12
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATtyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MTg0MzMwWhcNMjUwNDA1MTg0MzMwWjAYMRYw
FAYDVQQDEw02N2MwYjI1NS03YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4iVPfCnqni9GO5RKSrLi0/Jv3O+KlT3YC6yffHllmztvbyffIVsBc9Mn
6n4kYB5SQ8IDLOWkDk/6tA/EY9IMSHYoAc7fzMQ50byC0t7HFI635D0rhEVritx0
ze1yeT8C9rQqIBNOWpoh4F8IfKczCOOyB5TSF6kHJLpnCOpGyOBMrclqHsWSEK1J
3sbcEh1SkduroTsHBp0TVn59wzQFPU4jBqgtXgo+jHy/1MDDHJgtGUcTWx6qnuTR
2M9dRouc5D0M51CheOOn5XnPVkEPxIAfkKDyBIfFou4KISIDiK08vhYSmDNhtwAC
m41ZidP0s78ve+aiWCevHnxVNHpp8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHf1
gsfJTUDfmVZJX+y6hxgtEHwxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRUY2NTIzNkY1M0ExMUVGQjBBMDc0OEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8LMA0GCSqGSIb3DQEBCwUA
A4IBAQCKJCEfplIkwg72lDRPnZotuHqB7O1ZkT4kvIcpU+JNRWsEpUn9u+WczpbS
coQwqLhcnSJE/2zGQEy3k/fm8A6zuLpDcA+gO2tKkLH6nY38qhvb4Mcq8f6y9yIQ
ErQLMGyOeFqIhLUy1iYS1Ht0OX/H0Fc2r5IQPIFSzYXRNRsOCegEIUPRvHu78pla
a8QyBSUbdzkLvQ5TL6UwPC4O2rUz/cSDaeKrkzNiI99dsrzWu4BLDIN2k6jjhE2F
fu/m0U2oCf14bHCQjFxTlXGms8BylSL7mCVLGhCLixJNkYPjDdqPPcEa7bhv0HBd
JyxIPzJzapX/DXiOPQtaOJCcZ7IS
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:39 2025 by rpki-client